Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

createKey: make more generic and algorithm-driven #865

Open
mickrau opened this issue Feb 5, 2025 · 0 comments
Open

createKey: make more generic and algorithm-driven #865

mickrau opened this issue Feb 5, 2025 · 0 comments

Comments

@mickrau
Copy link

mickrau commented Feb 5, 2025

@davidz25 To follow up on our conversation last week we would like to discuss making the createKey() function (a) more generic and (b) driven by the algorithm instead of the key features.

(a) generic
Currently, the base classes CreateKeySettings and KeyInfo are fixed to ECKeys. In the sense of crypto agility we would prefer to use more generic classes.

(b) algorithm-driven
Currently, the caller must specify the ecCurve parameter in the function createKey() and the algorithm parameter in the function sign().
In OpenID4VCI the wallet must create a new key based on the values in proof_signing_lag_values_supported contained in the issuer's metadata. We would like to create a new key with an algorithm identifier, instead of mapping algorithm id to curve parameters first. The use of a fully-specified algorithm identifier would also be more generic and not limited to EC in the future.

Please note that the algorithm identifiers currently used from the IANA COSE registry are not fully-specified. This specification creates fully-specified algorithm identifiers: https://www.ietf.org/archive/id/draft-ietf-jose-fully-specified-algorithms-06.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant